560eacd7926a749b0552ffe724c7d1087fe4a5a01175bf61938261e5859fdced | Triage

Analysis

max time kernel
142s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20220721-en
resource tags

arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system
submitted
25-07-2022 06:00

Sharing

Report Analysis Logs

General

Target

560eacd7926a749b0552ffe724c7d1087fe4a5a01175bf61938261e5859fdced.exe
Size

73KB
MD5

4444984dabe4299f41d94221b5bf5598
SHA1

5e2dcc91e037a140d5f95db68d6ea2aa6b316b3f
SHA256

560eacd7926a749b0552ffe724c7d1087fe4a5a01175bf61938261e5859fdced
SHA512

0fa90ac96c48ac7f441cc8491d60449445feb609e1f65ee17bab85d10e41dc068dada3ceaec5cfd52d7bfa338612654c6e2e1c1be2daf4d260db5881728c69a9

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3152 4284 WerFault.exe 560eacd7926a749b0552ffe724c7d1087fe4a5a01175bf61938261e5859fdced.exe

C:\Users\Admin\AppData\Local\Temp\560eacd7926a749b0552ffe724c7d1087fe4a5a01175bf61938261e5859fdced.exe
"C:\Users\Admin\AppData\Local\Temp\560eacd7926a749b0552ffe724c7d1087fe4a5a01175bf61938261e5859fdced.exe"
1⤵
PID:4284

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4284 -s 408
2⤵
- Program crash
PID:3152

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4284 -ip 4284
1⤵
PID:812

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...